Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft
File:                     06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft (raw, json)
Hash identifier:          Dv4hvHvhUGyrMkPi2tckbgtOh7bVoQBG/TcQOxNrdOk=
Subject key identifier:   2A:7E:5E:FA:0C:18:95:70:6E:03:D6:37:9B:67:52:51:2F:64:B4:2D
Authority key identifier: 06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9
Certificate issuer:       /CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
Certificate serial:       42DBBD0BF4531091C03A0A5B0B778B88D3961E3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft
Manifest number:          5D
Signing time:             Wed 20 Aug 2025 09:46:23 +0000
Manifest this update:     Wed 20 Aug 2025 09:41:23 +0000
Manifest next update:     Thu 21 Aug 2025 12:30:23 +0000
Files and hashes:         1: 323830343a316265383a3a2f33322d3332203d3e203631373536.roa (hash: gjYR3lWRGiJJxuwH/+0i6Q87/18K+L4o4fePaKBOJ1w=)
                          2: 3133312e3130302e37342e302f32332d3233203d3e203631373536.roa (hash: 6FNuWOq1eHI5q3MgOqYyeE16Vv/YaJkuwv3MrFDS2IU=)
                          3: 06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl (hash: gyeE5jxepG4022L11oV8Udayk498LPM0z9MFREg809g=)
                          4: 3133312e3130302e37322e302f32322d3232203d3e203631373536.roa (hash: Kq1NYgqt7BBJXm6gv+qAVQNNtlsiDlad2EARZ4g408M=)
                          5: 323830343a316265383a383030303a3a2f33332d3333203d3e203631373536.roa (hash: Te1wIaLs970GrPtdJHvPfelk9mSSTu3aJper1pE/gLI=)
                          6: 323830343a316265383a3a2f33332d3333203d3e203631373536.roa (hash: l78EKC9kkJuCz96yuwMWkw3iPI6l1+LN8zK/5aMvMYQ=)
                          7: 3133312e3130302e37322e302f32332d3233203d3e203631373536.roa (hash: VVZyjmnPEhB4/UoqE4uR1WwlyjcIZU8B+HO+mEVFe+0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 12:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:db:bd:0b:f4:53:10:91:c0:3a:0a:5b:0b:77:8b:88:d3:96:1e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
        Validity
            Not Before: Aug 20 09:41:23 2025 GMT
            Not After : Aug 21 12:30:23 2025 GMT
        Subject: CN=2A7E5EFA0C1895706E03D6379B6752512F64B42D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7e:b3:a0:c7:7a:b5:0d:9b:4b:db:75:7d:2f:
                    ea:82:5c:79:b0:9d:57:56:54:83:7e:71:93:d1:67:
                    da:05:5b:a5:cf:c0:22:a7:40:04:01:17:6e:a3:40:
                    62:d9:e7:68:3d:30:6a:4b:ef:8c:4d:f7:70:b2:a8:
                    da:f2:8c:cc:85:b0:df:d7:97:9e:4c:95:e6:ca:a5:
                    00:80:ed:e7:97:6e:3b:77:bf:8a:0e:0a:3a:49:65:
                    74:0a:22:65:4f:55:00:2b:ae:f4:c3:d4:a9:44:db:
                    f4:56:fc:9c:c9:83:cb:29:fe:25:38:37:eb:53:a4:
                    7f:be:68:0c:4d:f9:86:ea:a8:7d:9d:3b:16:12:64:
                    78:fd:c7:2c:a7:1f:fa:62:9a:ce:91:5f:67:2e:a4:
                    26:8b:70:7a:40:84:10:fe:b6:87:fe:68:27:62:ae:
                    80:5e:fc:aa:a8:76:6c:1f:55:15:c6:03:3a:fd:0c:
                    d8:aa:62:1b:3b:05:4f:e8:38:e8:90:25:b7:8e:a2:
                    b8:02:ee:be:35:fb:ad:94:c7:1d:e2:8c:09:a8:bc:
                    8d:98:16:ed:97:90:b4:8d:6d:e9:4b:67:f5:be:00:
                    36:90:10:a6:12:fd:20:08:8c:82:81:34:c6:17:8b:
                    44:9b:98:d8:5e:b2:e0:d8:c1:a1:72:cc:21:0d:9a:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7E:5E:FA:0C:18:95:70:6E:03:D6:37:9B:67:52:51:2F:64:B4:2D
            X509v3 Authority Key Identifier:
                keyid:06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cf:95:46:13:5d:76:d7:fe:d0:7e:ed:a4:93:54:b2:32:37:
         6e:6a:f4:46:06:44:51:f5:dd:5a:8c:ab:2a:ac:50:6c:9f:f8:
         92:06:b9:0f:d6:b3:4b:31:dd:3f:4c:96:b7:71:36:0c:70:a9:
         a2:69:e1:72:6b:f0:f6:81:5e:22:a2:38:4d:29:d6:b1:4a:28:
         0e:38:e9:09:a7:aa:d1:7a:0b:98:a8:a1:02:47:a1:ab:34:e6:
         ec:74:92:81:2d:ac:d7:6d:6f:ac:7e:e6:a8:40:23:a2:e8:79:
         b2:4c:d1:4c:59:0d:4a:fc:e3:47:58:fb:9e:e2:e6:f2:11:a0:
         30:65:fc:6c:fd:fa:d7:f2:21:af:a3:e7:c9:a8:ba:f8:9d:f1:
         75:fb:0e:43:bd:7f:be:98:38:3a:91:73:87:90:6d:9d:80:67:
         6b:fa:89:3f:57:e5:4c:96:2b:68:8a:0f:00:57:e7:f8:1a:2b:
         3c:37:4f:3a:4e:7c:3b:a3:64:55:1b:01:6c:8a:6d:d7:6e:de:
         e0:e3:af:c4:ed:df:fa:5e:f6:71:cd:96:45:37:94:7e:5c:c6:
         c4:88:a8:7c:0e:68:b3:28:b8:11:a5:32:7f:18:2e:a3:74:38:
         ad:59:5b:e7:b7:71:52:41:3e:f2:92:3d:fa:e2:0e:f3:3f:58:
         55:74:19:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:30:50 2025 by rpki-client